
BUI*!** 

In the Claims: vjwi* 

Replacement Claims in Clean Form 

Please amend Claims 10 (second occurrence) through 15 as follows: 

ii[10]. (Amended) An election apparatus as claimed in Claim 10 wherein at least two of the data 
handling devices communicate information to one another over the Internet. 
12 [1 1]. (Amended) An election apparatus as claimed in Claim 10 wherein the data handling 
device that distributes ballots distributes a number of ballots from an inventory of ballots that has 
more members than there are registered voters. 

13 [12]. (Amended) An election apparatus as claimed in Claim 10 wherein the data handling 
device that distributes ballots distributes a ballot having a ballot number, and a matching pair 
made up of plain-text versions of ballot choices and encrypted versions of ballot choices. 
14[13]. (Amended) An election apparatus as claimed in Claim 13 [12] wherein the encrypted 
version is encrypted using an encryption key unique to the ballot. 

15 [14]. (Amended) An election apparatus as claimed in Claim 13 [12] wherein the ballot choices 
include ballot choices in municipal and national elections. 

16[15], (Amended) An election apparatus as claimed in Claim 10 wherein the authenticator is 
protected by a firewall. 



44130 



11 



Please add new claims 17-234 as follows: 

-17. New Claim)An election apparatus as claimed in Claim 10 where any one of the registrar, the 
authenticated the distributor, the counter, the matcher, and the verifier is protected by a firewall- — 

--18. New Claim)An election system including: 

(a) a registrar including a registrar link for communication to at least permit a plurality of voters 
to obtain a unique voter ID; 

(b) a plurality of ballots for distribution to at least a portion of said plurality of voters, each ballot 
including a unique ballot ID and a list of plain data; and 

(c) a data reconciler including a data reconciler link for communication to at least said registrar. -- 
~19.(New Claim)The election system according to Claim 18 further including a tally system having a 

tally system link for communication to at least said data reconciler. — 
—20. (New Claim)The election system according to Claim 19 further including a counter having a 

counter link for communication at least within said election system.— 
—21. (New Claim)The election system according to Claim 20 further including a ballot generator for 

generating said plurality of ballots.— 
— 22.(New Claim)The election system according to Claim 21 wherein said ballot generator is secure 

ballot generator. -- 

—23. (New Claim)The election system according to Claim 22 further including a matching pair generator 

for generating a matching pair corresponding said unique ballot ID and said corresponding list of 

plain data for each of said plurality of ballots.- 
~24.(New Claim)The election system according to Claim 22 further including a ballot encryption key 

generator for generating a plurality of ballot encryption keys corresponding to said plurality of 

ballots. - 

-25. (New Claim)The election system according to Claim 24 wherein said ballot encryption key 
generator is a ballot encryption key-decryption key pair generator. - 
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~26.(New Claim)The election system according to Claim 24 further including a ballot encryptor for 

encrypting said corresponding list of plain data for each of said plurality of ballots using said 

corresponding plurality of ballot encryption keys.~ 
~27.(New Claim)The election system according to Claim 22 further including a ballot decryption key 

generator for generating a plurality of ballot decryption keys corresponding to said plurality of ballots 

to facilitate decryption thereof. - 
—28. (New Claim)The election system according to Claim 20 further including a ballot authenticator for 

authenticating cast ballots.- 
~29.(New Claim)The election system according to Claim 28 further including a tallier for tallying cast 

ballots.- 

~30.(New Claim)The election system according to Claim 29 further including a decryptor for decrypting 

cast ballots prior to tallying cast ballots.-- 
—31. (New Claim)The election system according to Claim 20 further including a counter database having 

at least said unique ballot IDs of said plurality of ballots.- 
~32.(New Claim)The election system according to Claim 31 said counter database further including a 

decryption key corresponding to each of said unique ballot IDs of said plurality of ballots.-- 
—33. (New Claim)The election system according to Claim 31 said counter database further including at 

least one of: 

(a) said plurality of ballots; 

(b) a matching pair corresponding to each of said unique ballot IDs; and 

(c) an encryption key corresponding to each of 
said unique ballot IDs.— 

-34.(New Claim)The election system according to Claim 20 further including a counter key generator. -- 
~35.(New Claim)The election system according to Claim 34 wherein said counter key generator is a 

public key-private key pair generator. — 
— 36.(New Claim)The election system according to Claim 31 further including a counter database 

encryptor.— 
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~37.(New Claim)The election system according to Claim 36 wherein said counter database encryptor is 
an on the fly encryptor.— 

-38.(New Claim)The election system according to Claim 36 wherein said counter database encryptor 
uses public keys generated by a plurality of facilities of said election system to encrypt said counter 
database.- 

~39.(New Claim)The election system according to Claim 36 further including a counter database 
decryptor.— 

~40.(New Claim)The election system according to Claim 39 wherein said counter database decryptor is a 
partial decryptor.- 

-41. (New Claim)The election system according to Claim 19 further including a matcher having a 

matcher link for communication at least within said election system. -- 
-42.(New Claim)The election system according to Claim 41 wherein said matcher link is for 

communication with said plurality of voters.-- 
—43. (New Claim)The election system according to Claim 41 further including a matcher database having 

at least a matching pair corresponding to each of said unique ballot IDs of said plurality of ballots.-- 
-44.(New Claim)The election system according to Claim 41 further including a matcher key generator. -- 
-45. (New Claim)The election system according to Claim 44 wherein said matcher key generator is a 

public key-private key pair generator. 
-46.(New Claim)The election system according to Claim 43 further including a matcher database 

encryptor.— 

-47.(New Claim)The election system according to Claim 46 wherein said c matcher database encryptor 

is an on the fly encryptor. — 
~48.(New Claim)The election system according to Claim 46 wherein said matcher database encryptor 

uses public keys generated by a plurality of facilities of said election system to encrypt said matcher 

database.- 

~49.(New Claim)The election system according to Claim 46 further including a matcher database 
decryptor.— 
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«50.(New Claim)The election system according to Claim 49 wherein said matcher database decryptor is 
a partial decryptor.— 

—51. (New Claim)The election system according to Claim 19 further including a distributor having a 

distributor link for communication at least within said election system. — 
~52.(New Claim)The election system according to Claim 51 wherein said distributor link is for 

communication with said plurality of voters.-- 
—53. (New Claim)The election system according to Claim 52 further including a distributor database 

having at least said plurality of ballots.-- 
~54.(New Claim)The election system according to Claim 51 further including a distributor key 

generator. -- 

--55. (New Claim)The election system according to Claim 54 wherein said distributor key generator is a 

public key-private key pair generator. - 
-56.(New Claim)The election system according to Claim 53 further including a distributor database 

encryptor.— 

~57.(New Claim)The election system according to Claim 56 wherein said distributor database encryptor 

is an on the fly encryptor.-- 
~58.(New Claim)The election system according to Claim 56 wherein said distributor database encryptor 

uses public keys generated by a plurality of facilities of said election system to encrypt said matcher 

database. - 

-59.(New Claim)The election system according to Claim 56 further including a distributor database 
decryptor. « 

~60.(New Claim)The election system according to Claim 59 wherein said distributor database decryptor 

is a partial decryptor. « 
—61. (New Claim)An election system including: 

(a) a registrar including a registrar link for communication to at least permit a plurality of voters 
to obtain a unique voter ED; 
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(b) a plurality of ballots for distribution to at least a portion of said plurality of voters, each ballot 
including a unique ballot ID and a list of plain data; 

(c) a plurality of authentication codes, an authentication code for use with a cast ballot of said 
plurality of ballots; and 

(d) a data reconciler including a data reconciler link for communication to at least said registrar. -- 
~62.(New Claim)The election system according to Claim 61 wherein said authentication code is 

provided by said data reconciler.-- 
~63.(New Claim)The election system according to Claim 61 said plurality of ballots further including an 

encrypted version of said list of plain data.— 
— 64.(New Claim)The election system according to Claim 61 wherein said authentication code is an 

encrypted version of said list of plain data.-- 
—65. (New Claim)The election system according to Claim 64 wherein said encrypted version of said list 

of plain data is provided to a distributor for proving to said plurality of voters.-- 
—66. (New Claim)The election system according to Claim 64 further including a plurality of matching 

pairs corresponding to an encrypted version of said list of plain data.-- 
~67.(New Claim)The election system according to Claim 66 wherein said plurality of matching pairs is 

provided by said data reconciler.-- 
—68. (New Claim)The election system according to Claim 67 wherein said plurality of matching pairs are 

provided to a matcher for distribution to said plurality of voters.-- 
— 69.(New Claim)The election system according to Claim 61 said registrar further including a voter 

identifier for determining the identity of said plurality of voters that have cast a vote.— 
— 70.(New Claim)The election system according to Claim 61 said registrar further including a registrar 

database of said plurality of voters.— 
—71. (New Claim)The election system according to Claim 70 wherein said registrar database includes 

voter information.— 

— 72.(New Claim)The election system according to Claim 71 wherein said voter information includes 
voter names.— 
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--73.(New Claim)The election system according to Claim 70 said registrar database further including 

unique voter IDs of said plurality of voters.- 
«74.(New Claim)The election system according to Claim 70 said registrar further including a registrar 

key generator. — 

-7 5. (New Claim)The election system according to Claim 74 wherein said registrar key generator is a 

public key-private key pair generator.- 
~76.(New Claim)The election system according to Claim 70 further including a registrar database 

encryptor. - 

— 77.(New Claim)The election system according to Claim 76 wherein said registrar database encryptor is 
an on the fly encryptor.— 

—78. (New Claim)The election system according to Claim 76 wherein said registrar database encryptor 
uses public keys generated by a plurality of facilities of said election system to encrypt said registrar 
database.— 

—79. (New Claim)The election system according to Claim 76 further including a registrar database 
decryptor. 

— 80.(New Claim)The election system according to Claim 79 wherein said registrar database decryptor is 
a partial decryptor.— 

—81. (New Claim)The election system according to Claim 61 wherein said unique voter ED facilitates 

communication between a voter of said plurality of voters and said data reconciler.-- 
-82.(New Claim)The election system according to Claim 61 wherein said unique voter ID facilitates 

communication between a voter of said plurality of voters and said registrar.— 
—83. (New Claim)The election system according to Claim 61 wherein said unique voter ID permits a 

voter of said plurality of voters to obtain a ballot of said plurality of ballots.- 
-84.(New Claim)The election system according to Claim 61 wherein said unique voter ID permits 

verifying that a voter of said plurality of voters cast a ballot of said plurality of ballots.- 
-85. (New Claim)The election system according to Claim 61 wherein said registrar link is bi-directional.- 
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~86.(New Claim)The election system according to Claim 61 wherein said registrar link is an Internet 
link.~ 

-87.(New Claim)The election system according to Claim 61 said registrar further including a unique 
voter ID generator.— 

-88. (New Claim)The election system according to Claim 87 said unique voter ID generator further 

including a counter for determining the number of unique IDs generated.— 
~89.(New Claim)The election system according to Claim 61 wherein said registrar link facilitates 

providing said unique voter ID from said data reconciler to a voter. -- 
~90.(New Claim)The election system according to Claim 61 wherein said registrar link facilitates 

providing a voter private key to a voter of said plurality of voters. — 
-91 .(New Claim)The election system according to Claim 90 wherein said registrar passes said voter 

private key to said voter of said plurality of voters without keeping a copy of said voter private key.— 
-92. (New Claim)The election system according to Claim 61 further including an authenticator including 

an authenticator link for communication to at least said registrar.-- 
—93. (New Claim)The election system according to Claim 92 further including a voter authenticator.— 
~94.(New Claim)The election system according to Claim 92 further including an authenticator database.- 

—95. (New Claim)The election system according to Claim 92 wherein said authenticator database 

includes a plurality of voter ID-decryption key pairs.— 
— 96.(New Claim)The election system according to Claim 95 wherein said plurality of voter 

ID-decryption key pairs is a plurality of voter ID-voter public key pairs.-- 
— 97.(New Claim)The election system according to Claim 92 further including a voter key generator.— 
~98.(New Claim)The election system according to Claim 97 wherein said voter key generator is a voter 

decryption key generator. -- 
-99. (New Claim)The election system according to Claim 98 wherein said voter decryption key generator 

is a voter public key-private key pair generator. - 
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~100.(New Claim)The election system according to Claim 92 said authenticator further including a 

authenticator key generator. — 
101. (New Claim)The election system according to Claim 100 wherein said authenticator key generator 

is a public key-private key pair generator.— 
~102.(New Claim)The election system according to Claim 94 further including a authenticator database 

encryptor.— 

—103. (New Claim)The election system according to Claim 102 wherein said authenticator database 

encryptor is an on the fly encryptor.— 
~104.(New Claim)The election system according to Claim 102 wherein said authenticator database 

encryptor uses public keys generated by a plurality of facilities of said election system to encrypt said 

authenticator database.— 

—105. (New Claim)The election system according to Claim 102 further including a authenticator database 
decryptor.— 

-106.(New Claim)The election system according to Claim 105 wherein said authenticator database 

decryptor is a partial decryptor.-- 
-107.(New Claim)The election system according to Claim 61 further including a verifier including a 

verifier link for communication at least within said election system.- 
~108.(New Claim)The election system according to Claim 107 further including a vote counter for 

counting cast ballots to verify a vote tally. - 
-109.(New Claim)The election system according to Claim 108 wherein said vote counter facilitates 

independently counting cast ballots to verify a vote tally. -- 
— 1 10.(New Claim)The election system according to Claim 108 further including a ballot decrytor for 

decrypting cast ballots to permit said vote counting of said vote tally.- 
-1 1 l.(New Claim)The election system according to Claim 107 further including a verifier database.- 
-1 12.(New Claim)The election system according to Claim 1 1 1 wherein said verifier database includes a 

plurality of ballot ID-decryption key pairs.- 
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»1 13. (New Claim)The election system according to Claim 1 12 wherein said plurality of ballot 

ID-decryption key pairs is a plurality of ballot ID- voter public key pairs. -- 
~1 14.(New Claim)The election system according to Claim 107 said verifier further including a verifier 

key generator. — 

—1 15. (New Claim)The election system according to Claim 114 wherein said verifier key generator is a 

public key-private key pair generator. -- 
«1 16.(New Claim)The election system according to Claim 111 further including a verifier database 

encryptor. - 

~1 17.(New Claim)The election system according to Claim 116 wherein said verifier database encryptor 

is an on the fly encryptor.- 
-1 18. (New Claim)The election system according to Claim 116 wherein said verifier database encryptor 

uses public keys generated by a plurality of facilities of said election system to encrypt said verifier 

database.- 

~1 19.(New Claim)The election system according to Claim 116 further including a verifier database 
decryptor.— 

-120.(New Claim)The election system according to Claim 119 wherein said verifier database decryptor 
is a partial decryptor.- 

-121. (New Claim)The election system according to Claim 61 wherein said data reconciler link permits 

communication with a voter of said plurality of voters.-- 
-122.(New Claim)The election system according to Claim 121 wherein said communication with a voter 

of said plurality of voters is via an Internet link.— 
—123. (New Claim)The election system according to Claim 121 wherein said communication with a voter 

of said plurality of voters is via an Intranet link.-- 

-124.(New Claim)An election system including: 

(a) a registrar including a registrar link for communication to at least permit a plurality of voters 
to obtain a unique voter ID; 
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(b) a plurality of ballots for distribution to at least a portion of said plurality of voters, each ballot 
including a unique ballot ID and a list of plain data; 

(c) a plurality of authentication codes, an authentication code for use with a cast ballot of said 
plurality of ballots; 

(d) a data reconciler including a data reconciler link for communication to at least said registrar; 
and 

(e) a tally system having a tally system link for communication to at least said data reconciler. — 
-125. (New Claim)The election system according to Claim 124 further including a counter having a 

counter link for communication at least within said election system.-- 
— 126.(New Claim)The election system according to Claim 125 further including a ballot generator for 

generating said plurality of ballots.-- 
-127.(New Claim)The election system according to Claim 126 wherein said ballot generator is secure 

ballot generator. - 

-128. (New Claim)The election system according to Claim 127 further including a matching pair 

generator for generating a matching pair corresponding said unique ballot ID and said corresponding 

list of plain data for each of said plurality of ballots.-- 
~129.(New Claim)The election system according to Claim 127 further including a ballot encryption key 

generator for generating a plurality of ballot encryption keys corresponding to said plurality of 

ballots.-- 

~130.(New Claim)The election system according to Claim 129 wherein said ballot encryption key 

generator is a ballot encryption key-decryption key pair generator. -- 
—131. (New Claim)The election system according to Claim 129 further including a ballot encryptor for 

encrypting said corresponding list of plain data for each of said plurality of ballots using said 

corresponding plurality of ballot encryption keys.— 
-132. (New Claim)The election system according to Claim 127 further including a ballot decryption key 

generator for generating a plurality of ballot decryption keys corresponding to said plurality of ballots 

to facilitate decryption thereof.— 
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~133.(New Claim)The election system according to Claim 125 further including a ballot authenticator 

for authenticating cast ballots.-- 
~134.(New Claim)The election system according to Claim 133 further including a tallier for tallying cast 

ballots.— 

-135. (New Claim)The election system according to Claim 134 further including a decryptor for 

decrypting cast ballots prior to tallying cast ballots.- 
-136.(New Claim)The election system according to Claim 125 further including a counter database 

having at least said unique ballot IDs of said plurality of ballots.-- 
-137.(New Claim)The election system according to Claim 136 said counter database further including a 

decryption key corresponding to each of said unique ballot IDs of said plurality of ballots.-- 
~138.(New Claim)The election system according to Claim 136 said counter database further including at 
least one of: 

(a) said plurality of ballots; 

(b) a matching pair corresponding to each of said unique ballot IDs; and 

(c) an encryption key corresponding to each of said unique ballot IDs.- 

— 139.(New Claim)The election system according to Claim 125 further including a counter key 
generator.-- 

~140.(New Claim)The election system according to Claim 139 wherein said counter key generator is a 

public key-private key pair generator.-- 
—141. (New Claim)The election system according to Claim 136 further including a counter database 

encryptor.— 

—142. (New Claim)The election system according to Claim 141 wherein said counter database encryptor 

is an on the fly encryptor.— 
~143.(New Claim)The election system according to Claim 141 wherein said counter database encryptor 

uses public keys generated by a plurality of facilities of said election system to encrypt said counter 

database.-- 
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»144.(New Claim)The election system according to Claim 141 further including a counter database 
decryptor.— 

—145. (New Claim)The election system according to Claim 144 wherein said counter database decryptor 
is a partial decryptor.— 

— 146.(New Claim)The election system according to Claim 124 further including a matcher having a 

matcher link for communication at least within said election system.— 
— 147.(New Claim)The election system according to Claim 146 wherein said matcher link is for 

communication with said plurality of voters.— 
— 148.(New Claim)The election system according to Claim 146 further including a matcher database 

having at least a matching pair corresponding to each of said unique ballot IDs of said plurality of 

ballots.— 

— 149.(New Claim)The election system according to Claim 146 further including a matcher key 
generator.— 

— 150.(New Claim)The election system according to Claim 149 wherein said matcher key generator is a 

public key-private key pair generator. — 
-151. (New Claim)The election system according to Claim 148 further including a matcher database 

encryptor. — 

— 152.(New Claim)The election system according to Claim 151 wherein said c matcher database 

encryptor is an on the fly encryptor. — 
—153. (New Claim)The election system according to Claim 151 wherein said matcher database encryptor 

uses public keys generated by a plurality of facilities of said election system to encrypt said matcher 

database.— 

— 154.(New Claim)The election system according to Claim 151 further including a matcher database 
decryptor.— 

—155. (New Claim)The election system according to Claim 154 wherein said matcher database decryptor 
is a partial decryptor. ~ 
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~156.(New Claim)The election system according to Claim 124 further including a distributor having a 

distributor link for communication at least within said election system.-- 
~157.(New Claim)The election system according to Claim 156 wherein said distributor link is for 

communication with said plurality of voters.-- 
~158.(New Claim)The election system according to Claim 157 further including a distributor database 

having at least said plurality of ballots.— 
~159.(New Claim)The election system according to Claim 156 further including a distributor key 

generator. -- 

~160.(New Claim)The election system according to Claim 159 wherein said distributor key generator is 

a public key-private key pair generator.-- 
--161. (New Claim)The election system according to Claim 158 further including a distributor database 

encryptor.— 

— 162.(New Claim)The election system according to Claim 161 wherein said distributor database 

encryptor is an on the fly encryptor.— 
—163 .(New Claim)The election system according to Claim 161 wherein said distributor database 

encryptor uses public keys generated by a plurality of facilities of said election system to encrypt said 

matcher database.-- 

~164.(New Claim)The election system according to Claim 161 further including a distributor database 
decryptor.— 

—165. (New Claim)The election system according to Claim 164 wherein said distributor database 

decryptor is a partial decryptor.— 
— 166.(New Claim)The election system according to Claim 124 wherein said authentication code is 

provided by said data reconciler.— 
-167. (New Claim)The election system according to Claim 124 said plurality of ballots further including 

an encrypted version of said list of plain data.— 
—168. (New Claim)The election system according to Claim 124 wherein said authentication code is an 

encrypted version of said list of plain data.— 
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~169.(New Claim)The election system according to Claim 168 wherein said encrypted version of said 

list of plain data is provided to a distributor for proving to said plurality of voters.— 
~170.(New Claim)The election system according to Claim 168 further including a plurality of matching 

pairs corresponding to an encrypted version of said list of plain data.— 
—171. (New Claim)The election system according to Claim 170 wherein said plurality of matching pairs 

is provided by said data reconciler.— 
— 172.(New Claim)The election system according to Claim 171 wherein said plurality of matching pairs 

are provided to a matcher for distribution to said plurality of voters.— 
—173. (New Claim)The election system according to Claim 124 said registrar further including a voter 

identifier for determining the identity of said plurality of voters that have cast a vote.— 
— 174.(New Claim)The election system according to Claim 124 said registrar further including a registrar 

database of said plurality of voters.— 
—175. (New Claim)The election system according to Claim 174 wherein said registrar database includes 

voter information. — 

—176. (New Claim)The election system according to Claim 175 wherein said voter information includes 
voter names.— 

—177. (New Claim)The election system according to Claim 174 said registrar database further including 

unique voter IDs of said plurality of voters.— 
—178. (New Claim)The election system according to Claim 174 said registrar further including a registrar 

key generator.— 

~179.(New Claim)The election system according to Claim 178 wherein said registrar key generator is a 

public key-private key pair generator.- 
~180.(New Claim)The election system according to Claim 174 further including a registrar database 

encryptor. - 

— 181. (New Claim)The election system according to Claim 180 wherein said registrar database encryptor 
is an on the fly encryptor. — 
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~182.(New Claim)The election system according to Claim 180 wherein said registrar database encryptor 
uses public keys generated by a plurality of facilities of said election system to encrypt said registrar 
database.— 

—183. (New Claim)The election system according to Claim 180 further including a registrar database 
decryptor.— 

~184.(New Claim)The election system according to Claim 183 wherein said registrar database decryptor 
is a partial decryptor.— 

-185. (New Claim)The election system according to Claim 124 wherein said unique voter ID facilitates 

communication between a voter of said plurality of voters and said data reconciler.-- 
-186.(New Claim)The election system according to Claim 124 wherein said unique voter ID facilitates 

communication between a voter of said plurality of voters and said registrar.- 
~187.(New Claim)The election system according to Claim 124 wherein said unique voter ID permits a 

voter of said plurality of voters to obtain a ballot of said plurality of ballots.- 
-188.(New Claim)The election system according to Claim 124 wherein said unique voter ID permits 

verifying that a voter of said plurality of voters cast a ballot of said plurality of ballots.- 
-189.(New Claim)The election system according to Claim 124 wherein said registrar link is bi- 

directional.-- 

-190.(New Claim)The election system according to Claim 124 wherein said registrar link is an Internet 
link.» 

—191. (New Claim)The election system according to Claim 124 said registrar further including a unique 
voter ID generator.-- 

-192.(New Claim)The election system according to Claim 191 said unique voter ID generator further 

including a counter for determining the number of unique IDs generated. — 
-193. (New Claim)The election system according to Claim 124 wherein said registrar link facilitates 

providing said unique voter ID from said data reconciler to a voter.-- 
~194.(New Claim)The election system according to Claim 124 wherein said registrar link facilitates 

providing a voter private key to a voter of said plurality of voters.- 
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-195. (New Claim)The election system according to Claim 194 wherein said registrar passes said voter 
private key to said voter of said plurality of voters without keeping a copy of said voter private key.~ 

-196.(New Claim)The election system according to Claim 124 further including an authenticator 
including an authenticator link for communication to at least said registrar. — 

~197.(New Claim)The election system according to Claim 196 further including a voter authenticator.- 

—198. (New Claim)The election system according to Claim 196 further including an authenticator 
database. — 

-199.(New Claim)The election system according to Claim 196 wherein said authenticator database 

includes a plurality of voter ID-decryption key pairs.-- 
— 200.(New Claim)The election system according to Claim 199 wherein said plurality of voter 

ID-decryption key pairs is a plurality of voter ID- voter public key pairs. ~ 
—201. (New Claim)The election system according to Claim 196 further including a voter key generator.— 
~202.(New Claim)The election system according to Claim 201 wherein said voter key generator is a 

voter decryption key generator.— 
—203. (New Claim)The election system according to Claim 202 wherein said voter decryption key 

generator is a voter public key-private key pair generator.-- 
~204.(New Claim)The election system according to Claim 196 said authenticator further including a 

authenticator key generator. ~ 
—205. (New Claim)The election system according to Claim 204 wherein said authenticator key generator 

is a public key-private key pair generator. — 
— 206.(New Claim)The election system according to Claim 198 further including a authenticator database 

encryptor.-- 

-207.(New Claim)The election system according to Claim 206 wherein said authenticator database 

encryptor is an on the fly encryptor.— 
—208. (New Claim)The election system according to Claim 206 wherein said authenticator database 

encryptor uses public keys generated by a plurality of facilities of said election system to encrypt said 

authenticator database.— 
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~209.(New Claim)The election system according to Claim 206 further including a authenticator database 
decryptor.-- 

~210.(New Claim)The election system according to Claim 209 wherein said authenticator database 

decryptor is a partial decryptor.-- 
—21 1. (New Claim)The election system according to Claim 124 further including a verifier including a 

verifier link for communication at least within said election system.— 
— 212.(New Claim)The election system according to Claim 211 further including a vote counter for 

counting cast ballots to verify a vote tally.-- 
—213. (New Claim)The election system according to Claim 212 wherein said vote counter facilitates 

independently counting cast ballots to verify a vote tally.— 
— 214.(New Claim)The election system according to Claim 212 further including a ballot decrytor for 

decrypting cast ballots to permit said vote counting of said vote tally. — 
—215. (New Claim)The election system according to Claim 211 further including a verifier database.— 
—216. (New Claim)The election system according to Claim 215 wherein said verifier database includes a 

plurality of ballot ID-decryption key pairs.— 
—2 17. (New Claim)The election system according to Claim 216 wherein said plurality of ballot 

ID-decryption key pairs is a plurality of ballot ID-voter public key pairs.-- 
—218. (New Claim)The election system according to Claim 21 1 said verifier further including a verifier 

key generator.— 

—2 19. (New Claim)The election system according to Claim 218 wherein said verifier key generator is a 

public key-private key pair generator. — 
— 220.(New Claim)The election system according to Claim 215 further including a verifier database 

encryptor. -- 

—221. (New Claim)The election system according to Claim 220 wherein said verifier database encryptor 
is an on the fly encryptor.-- 
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-222.(New Claim)The election system according to Claim 220 wherein said verifier database encryptor 
uses public keys generated by a plurality of facilities of said election system to encrypt said verifier 
database. ~ 

-223. (New Claim)The election system according to Claim 220 further including a verifier database 
decryptor.— 

— 224.(New Claim)The election system according to Claim 223 wherein said verifier database decryptor 
is a partial decryptor. — 

-225. (New Claim)The election system according to Claim 124 wherein said data reconciler link permits 

communication with a voter of said plurality of voters.— 
-226.(New Claim)The election system according to Claim 225 wherein said communication with a voter 

of said plurality of voters is via an Internet link.— 
-227.(New Claim)The election system according to Claim 225 wherein said communication with a voter 

of said plurality of voters is via an Intranet link.- 
-228. (New Claim)The election system according to Claim 225 wherein said communication with a voter 

of said plurality of voters is direct- 
— 229.(New Claim)The election system according to Claim 225 wherein said communication with a voter 

of said plurality of voters is indirect- 
— 230.(New Claim)The election system according to Claim 121 wherein said communication with a voter 

of said plurality of voters is direct.- 
-231. (New Claim)The election system according to Claim 121 wherein said communication with a voter 

of said plurality of voters is indirect.— 



-232. (New Claim)An election method including: 

(a) registering a plurality of voters by providing each a unique voter ID; 

(b) distributing to at least a portion of said plurality of voters a ballot including a unique 
ballot ID and a list of plain data; and 

(c) (c) reconciling a cast ballot of said plurality of ballots.— 
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